21.10.2026 22:41
Due to a security vulnerability that emerged in the PHP programming language, which is widely used worldwide, many public websites in Europe were taken offline.
Many internet sites in Europe went offline. A vulnerability in the PHP software language, which is widely used worldwide, affected many internet sites, including those belonging to public institutions in Europe. In countries such as the Netherlands, France, Germany, and Finland—especially Belgium, where EU institutions are heavily concentrated—many public internet sites were shut down as a precaution.
VULNERABILITY EMERGES IN PHP SOFTWARE LANGUAGE
The problem, which is reported to be closely monitored by cybersecurity experts, emerged after two vulnerabilities were detected in the widely used software language PHP worldwide. The Belgian Cybersecurity Center (CCB) announced that there had not yet been a confirmed attack but recommended shutting down sites due to the high risk. The CCB’s own site was also shut down for security reasons.
IT NEGATIVELY AFFECTED HOSPITALS
In Belgium, the websites of the Ministry of Foreign Affairs, Ministry of Finance, and Ministry of Labor were taken offline. Due to these cyber vulnerabilities, many institutions, especially hospitals, were affected. It was reported that Belgian media and education platforms were also affected by the precautionary shutdowns. Public sites in the Flemish part of Belgium were largely disabled.
In the Netherlands, the national digital identity system DigiD, the Port of Rotterdam portal, the Schiphol Airport mobile application, and the House of Representatives websites; in France, the websites of security units; and in Germany and Finland, public sites were shut down as a precaution.
NO CYBERATTACK, SYSTEMS ARE BEING UPDATED
The process involving the emerging vulnerability is considered the largest-scale cybersecurity operation in recent years, showing the fragility of Europe’s digital infrastructure. Experts and public officials state that the system shutdowns were not caused by a cyberattack and were for security and precautionary purposes. It was stated that necessary updates are being made on the sites kept closed in these countries, but no information was provided on when the sites could be reactivated.